diff --git a/docs/kubernetes/access-control.mdx b/docs/kubernetes/access-control.mdx
index 3d17597fbe..8bd4647180 100644
--- a/docs/kubernetes/access-control.mdx
+++ b/docs/kubernetes/access-control.mdx
@@ -38,6 +38,7 @@ helm upgrade openshell \
   oci://ghcr.io/nvidia/openshell/helm-chart \
   --version <version> \
   --namespace openshell \
+  --set supervisor.sandboxRuntime.networkPolicyEnforced=true \
   --set server.oidc.issuer=https://your-idp.example.com/realms/openshell \
   --set server.oidc.audience=openshell-cli \
   --set server.tls.clientCaSecretName=""
@@ -78,6 +79,7 @@ helm upgrade openshell \
   oci://ghcr.io/nvidia/openshell/helm-chart \
   --version <version> \
   --namespace openshell \
+  --set supervisor.sandboxRuntime.networkPolicyEnforced=true \
   --set server.oidc.issuer=https://your-idp.example.com/realms/openshell \
   --set server.oidc.audience=openshell-cli \
   --set server.tls.clientCaSecretName="" \
@@ -107,6 +109,7 @@ helm upgrade openshell \
   oci://ghcr.io/nvidia/openshell/helm-chart \
   --version <version> \
   --namespace openshell \
+  --set supervisor.sandboxRuntime.networkPolicyEnforced=true \
   --set server.auth.allowUnauthenticatedUsers=true
 ```
 
diff --git a/docs/kubernetes/ingress.mdx b/docs/kubernetes/ingress.mdx
index fd6be78fbd..82b805d608 100644
--- a/docs/kubernetes/ingress.mdx
+++ b/docs/kubernetes/ingress.mdx
@@ -162,6 +162,7 @@ helm upgrade --install openshell \
   oci://ghcr.io/nvidia/openshell/helm-chart \
   --version <version> \
   --namespace openshell \
+  --set supervisor.sandboxRuntime.networkPolicyEnforced=true \
   --set server.tls.enableMtls=false \
   --set grpcRoute.enabled=true \
   --set grpcRoute.gateway.create=true \
diff --git a/docs/kubernetes/openshift.mdx b/docs/kubernetes/openshift.mdx
index e510fc44c4..c7ef97be86 100644
--- a/docs/kubernetes/openshift.mdx
+++ b/docs/kubernetes/openshift.mdx
@@ -154,6 +154,7 @@ Install the chart with the GRPCRoute and BackendTLSPolicy enabled. The certgen h
 helm install openshell oci://ghcr.io/nvidia/openshell/helm-chart \
   --version <version> \
   --namespace openshell \
+  --set supervisor.sandboxRuntime.networkPolicyEnforced=true \
   --set podSecurityContext.fsGroup=null \
   --set securityContext.runAsUser=null \
   --set server.tls.enableMtls=false \
@@ -206,6 +207,7 @@ Install the chart with:
 helm install openshell oci://ghcr.io/nvidia/openshell/helm-chart \
   --version <version> \
   --namespace openshell \
+  --set supervisor.sandboxRuntime.networkPolicyEnforced=true \
   --set podSecurityContext.fsGroup=null \
   --set securityContext.runAsUser=null \
   --set server.disableTls=false \